+AC-20(04) Network Accessible Storage Devices — Prohibited Use

AC-20(04) Network Accessible Storage Devices — Prohibited Use

Control

Prohibit the use of [Assignement: network-accessible storage devices] in external systems.

Discussion

Network-accessible storage devices in external systems include online storage devices in public, hybrid, or community cloud-based systems.

Assessment Objective

the use of [Assignement: network-accessible storage devices] is prohibited in external systems.

Assessment Method

Examine

Access control policy procedures addressing use of network-accessible storage devices in external systems system design documentation system configuration settings and associated documentation system connection or processing agreements list of network-accessible storage devices prohibited from use in external systems system audit records system security plan other relevant documents or records

Interview

Organizational personnel with responsibilities for prohibiting the use of network-accessible storage devices in external systems system/network administrators organizational personnel with information security responsibilities

1. Ħarsa ġenerali

1.1 Referenzi

1.2 Rekwiżiti identifikati

1.3 Regolamenti relatati

2. Rekwiżiti identifikati

Rekwiżiti

3. Regolamenti relatati

Regolamenti

Kwistjonijiet marbuta

Links
is blocked by AC-20(04) Network Accessible Storage Devices — Prohibited Use – Assessment Procedure